Vulnerabilities

TI-2026-36815 CVE-2026-49982 · GHSA-7c78-jf6q-g5cm

tmp: Type-confusion bypass of _assertPath in [email protected] allows path traversal via non-string prefix/postfix/template

HIGH 75

tmp is a temporary file and directory creator for node.js.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00496 Published 2026-06-11 Fixed in 0.2.7 CWE-20

TI-2026-32592 CVE-2026-44705 · GHSA-ph9p-34f9-6g65

HIGH 69

tmp is a temporary file and directory creator for node.js.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00434 Published 2026-06-11 Partial fix · 0.2.6 CWE-22

TI-2025-34552 CVE-2025-54798 · GHSA-52f5-9888-hmc6

MEDIUM 57

tmp is a temporary file and directory creator for node.js.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00376 Published 2025-08-07 Partial fix · 0.2.4 CWE-59